11 ms·

I’ve been using 1Password every day for over 11 years now. The oldest passwords I’ve got stored are for Twitter and Dropbox (yes, the passwords have been change

I’ve been using 1Password every day for over 11 years now. The oldest passwords I’ve got stored are for Twitter and Dropbox (yes, the passwords have been changed but the records were first created in 2009). It’s one of those apps which has been made with proper craftsmanship and care, so while I’m not a Linux user, I’d have no problem recommending based solely on Agilebit’s reputation.

burnte 6y ago
I used KeePass, then LastPAss, then tried 1Password about 8 years ago. I haven't even considered changing. I joined when they were still mostly focused on MacOS and iOS, the Windows and Android apps were secondary. Since then they really shifted to a totally cross platform experience, and I'm incredibly happy with the app. I'm glad they're branching out to Linux.
- z3ncyberpunk 6y ago
  Why switch to this when keepass is way more portable, open source, and isn't some stupid SaaS program.
numbers 6y ago
Used Dashlane for 2-3 years and then tried 1Password and I haven’t looked back. Dashlane has too many bugs to be useful all the time.
bredren 6y ago
Also a longtime user. Did you kick over to their subscription model or have you stuck with the old installs attached to the grandfathered permanent license?
- DavideNL 6y ago
  I'm still using the permanent license...and syncing over iCloud, while using the latest versions of the 1Password app, on macOS & iOS. As soon as this stops working and i'm forced to get a subscription i'm moving to another password manager though. So hopefully one time purchases will remain possible.
  - bredren 6y ago
    I also considered a move but I may just get the subscription. If Apple offered a more fully featured keychain I might just stay in their ecosystem.
    - DavideNL 6y ago
      €36 a year, so for a period of 5 years that makes €180. For me and my partner that would be €360 for 5 years! For a password manager... I also considered using KeepassXC and Strongbox on iOS, which is completely free (sync the database via iCloud.) KeepassXC's browser extensions are pretty bad though, hopefully that will change sometime soon. If you want to keep costs low, Bitwarden is currently your best option i think.
      - bredren 6y ago
        That pricing seems high until I consider the utility and importance of the tool. I do think it should cost less, but I also sort of am hoping a solid solution built directly into iOS/macOS will appear in the next few years. It is a much harder sell to a family member that has never bothered with a secrets manager before.
      - nixgeek 6y ago
        https://1password.com/families/ https://1password.com/families/ They’ve got a family-oriented subscription which is cheaper. Used it since it launched and it’s been transformative for both sharing credentials with my family and getting them into the habit of unique credentials on every site, and TOTP where possible as well. I can’t recommend 1Password enough and I’ve been a customer for a very long time, predating the move to subscription pricing and cloud services. It’s worlds improved over synchronizing with Dropbox. There’s definitely security tradeoffs but if it isn’t easy you’d lose a substantial number of people back to duplicating the same password across 370 sites.
        DavideNL 6y ago
        There's a problem with the family plan: There's always 1 person (family organizer) who is in charge of everything, and can reset the other accounts...
Scarbutt 6y ago
But why a whole electron app just to store passwords?
- Spivak 6y ago
  Why a whole GTK or Mono app just to store passwords? Once you’ve decided that you want to make a GUI for something you’ve already made the choice to increase the weight considerably. Electron is still the best cross platform toolkit when you need browser support too.
  - Scarbutt 6y ago
    Electron is still the best cross platform toolkit when you need browser support too. Agree, just though it was too much for something simple as displaying logins/pass but looks like it has lots of features?
- pseudalopex 6y ago
  The other versions are native. It's one of the things that sets 1Password apart. Is the Linux version Electron?
  - Scarbutt 6y ago
    Yes. Not against Electron but maybe I'm underestimating the ui/ux complexity of a password manager since I have never use one.
    - suchire 6y ago
      More likely it is the overhead of multiplatform support that motivates them to use Electron. Their support matrix is pretty big now: iOS, Android, Web, Mac, Windows, browser extensions, Chrome OS, and Linux
      - pjmlp 6y ago
        Amiga, Atari, Mac OS, MS-DOS, Windows, UNIX, with teams that reached around 10 maximum. How did we ever managed without Electron?!? Man we were 1337!
mkskm 6y ago
> It’s one of those apps which has been made with proper craftsmanship and care Is it? I've been using it for sometime as well but it seems like there is a lot of room for improvement. E.g: - Support for unlocking via Watch ID on the Mac. - Currently on iOS when searching for a password within an app, if a site prefix is included that doesn't match what's in 1Password the list will just show no results, with no way to navigate manually to the login. Instead, you have to close the app, open 1Password, and copy/paste the credentials back in. Typically the master password will have to be re-entered as well, despite touch ID being adequate a moment prior. Since it's rare to sign up via the web now for mobile apps, this is the most common scenario for me when using 1Password for apps on my phone (and occasionally websites as well). - Improved UI/UX on mobile. Dashlane is way better in this regard. 1Password overemphasizes features I don't need like tags and favorites and has a pretty cluttered look in general. I like the native Mac app and open/local vault format. (Dashlane by contrast has a very buggy desktop app and requires storing everything on their servers.) But I would jump at the chance to use an alternative with a simpler UI and better experience on mobile.
- suchire 6y ago
  We use Dashlane at work, and every day I want to switch to 1Password, which I use in my home life. Dashlane has weird permissions glitches, a really buggy and very non-intuitive desktop app, really terrible web browser extensions that makes me tear out my hair in frustration, and even the mobile app doesn’t feel like it has the features I want, like the ability to add more than one password field (useful for accounts that have PIN codes and such). Even performance-wise, Dashlane’s mobile app feels really sluggish doing things like adding 2FA via QR code’s, which 1Password seems to do instantly.
  - mkskm 6y ago
    Agreed on all those points, especially the desktop app which was ultimately the breaking point for me. The only thing better about Dashlane right now is the UI on the iOS app IMO.
- bwoodruff 6y ago
  Thanks for the feedback! We can unlock 1Password for Mac via Apple Watch on Macs that have Secure Enclaves now. :) - Ben, 1Password
karlshea 6y ago
It's made with proper craftsmanship and care on the Mac (which is primarily where I've been using it for years). The Windows client is much better after the last major release, but it's never been as slick as the Mac version (the biggest wart now is the system tray/browser extension popup). 1Password X looks nice until you try and use it, and all the company reps on the forums are very argumentative about any feature request (look for the pushback they give about resizing their super-cramped browser extension popup—and the issues with hires screens stemming from how they built it, which assumes a fixed size). I've also got a chip on my shoulder about the "feature" they added that showed the most recently used websites in the iOS app with no way to disable it (they finally allowed setting the number to zero months later). The reps on their forums all come off with this attitude of "this is the best way, and you're wrong if you don't like it" for just about every issue that comes up. I like the app and will continue to use it, but if my main platform wasn't macOS/iOS I would have bailed long ago.
- jchw 6y ago
  They were also pretty dismissive of Linux for a long time, so it's kind of funny to hear it as one of their biggest requests. 1Password X narrowly prevented me from switching for a while, but I've come to see alternatives as generally better options. Yeah, they're not as flashy, but I think Bitwarden and Keepass XC do a great job. Keepass XC may even be doing a better job at security. At least in some dimensions. https://keepassxc.org/blog/2019-02-21-memory-security/ https://keepassxc.org/blog/2019-02-21-memory-security/
  - karlshea 6y ago
    That’s where Agilebits has me; the UI on Mac and iOS is so much better than the alternatives. I do keep looking, Keepass XC looks really good since the last time I checked around.
    - benhurmarcel 6y ago
      KeepassXC is quite good if you mainly use it on your computer. I've been using Keepass(XC) for about 10 years, it's secure and reliable. But I'm looking to switch to 1password or Bitwarden as I'm increasingly using portable devices (phone, tablet…).
foobiekr 6y ago
I am a 1password user, and have bene for about the same amount of time, but I've been slowly looking for an alternative. Unless I'm mistaken, 1Password no longer ephemerally decrypts passwords as needed and only while used and then scrubs the memory. [1, old but still] The excuse, if I remember it, was that garbage collected languages made this challenging. Even so, there is some irony in them moving away from the temporary, one-at-a-time, scrubbed approach just before all of the side channel attacks that allowed leaking memory across processes became widespread. [1] https://nakedsecurity.sophos.com/2019/02/21/password-managers-leaking-data-in-memory-but-you-should-still-use-one/ https://nakedsecurity.sophos.com/2019/02/21/password-manager...
- Hawxy 6y ago
  > The excuse, if I remember it, was that garbage collected languages made this challenging This is one of the main reasons why the core of 1password was rewritten in Rust: https://support.1password.com/kb/201902a/ https://support.1password.com/kb/201902a/
  - pjmlp 6y ago
    Except that one could make use of OS APIs for ensuring that, while still using a GC language.
  - foobiekr 6y ago
    Interesting. But this doesn't seem to cover the Mac version.
- deleted 6y ago
  [deleted]
pjmlp 6y ago
Apparently that craftsmanship went astray with the adoption of Electron.
- LockAndLol 6y ago
  Electron? You must not be talking about the Linux app because it's written in Rust.
  - pjmlp 6y ago
    Embedded in an Electron app, otherwise please correct me what toolkit they are using.
    - harikb 6y ago
      Yeah it sounds like Electron with React/JS UI talking to a Rust "backend". I would give them credit for keeping the important bits in Rust though
      - bwoodruff 6y ago
        Thank you! This is correct. We understand there are concerns about Electron (some legitimate and some religious), and we've built this app with those concerns in mind. The backend is Rust, with the arguably most critical components (encryption) being open source libraries (ring). - Ben, 1Password
- moooo99 6y ago
  Why the hate for electron? I know that there are a bunch of shitty electron apps out there, but there are also great, fast and leightweight examples. Visual Studio Code is easily one of the best desktop apps I've used (on Windows) and Discord is also built on electron and works very well. Electron isn't necessarily bad, its primarly a matter of how good your implementation is.
  - spideymans 6y ago
bashinator 6y ago
Yup. Password management is one of those things where I want to pick the best possible solution, over the 80% good for 20% of the cost. The risks of losing credentials are real, and terrible. Making shit easy for non-technical people is a real-world risk reduction. Making shit easy for technical people is also a real-world risk reduction, and letting me put 1P into automated workflows is great. If there's minor encroachment on territory currently held by Hashicorp Vault, then "Go 1P!" - I love competition between two genuinely good products.
disposedtrolley 6y ago
I just checked my vault out of curiosity, and my first entry from 2009 is the credit card I used to purchase a 1Password licence shortly after! It’s robust software that does was it says on the box. I was initially reluctant to move out of my local vault but the online service has been impeccable.

burnte 6y ago

I used KeePass, then LastPAss, then tried 1Password about 8 years ago. I haven't even considered changing. I joined when they were still mostly focused on MacOS and iOS, the Windows and Android apps were secondary. Since then they really shifted to a totally cross platform experience, and I'm incredibly happy with the app. I'm glad they're branching out to Linux.

z3ncyberpunk 6y ago
Why switch to this when keepass is way more portable, open source, and isn't some stupid SaaS program.

numbers 6y ago

Used Dashlane for 2-3 years and then tried 1Password and I haven’t looked back. Dashlane has too many bugs to be useful all the time.

bredren 6y ago

Also a longtime user. Did you kick over to their subscription model or have you stuck with the old installs attached to the grandfathered permanent license?

DavideNL 6y ago
I'm still using the permanent license...and syncing over iCloud, while using the latest versions of the 1Password app, on macOS & iOS. As soon as this stops working and i'm forced to get a subscription i'm moving to another password manager though. So hopefully one time purchases will remain possible.
- bredren 6y ago
  I also considered a move but I may just get the subscription. If Apple offered a more fully featured keychain I might just stay in their ecosystem.
  - DavideNL 6y ago
    €36 a year, so for a period of 5 years that makes €180. For me and my partner that would be €360 for 5 years! For a password manager... I also considered using KeepassXC and Strongbox on iOS, which is completely free (sync the database via iCloud.) KeepassXC's browser extensions are pretty bad though, hopefully that will change sometime soon. If you want to keep costs low, Bitwarden is currently your best option i think.
    - bredren 6y ago
      That pricing seems high until I consider the utility and importance of the tool. I do think it should cost less, but I also sort of am hoping a solid solution built directly into iOS/macOS will appear in the next few years. It is a much harder sell to a family member that has never bothered with a secrets manager before.
    - nixgeek 6y ago
      https://1password.com/families/ https://1password.com/families/ They’ve got a family-oriented subscription which is cheaper. Used it since it launched and it’s been transformative for both sharing credentials with my family and getting them into the habit of unique credentials on every site, and TOTP where possible as well. I can’t recommend 1Password enough and I’ve been a customer for a very long time, predating the move to subscription pricing and cloud services. It’s worlds improved over synchronizing with Dropbox. There’s definitely security tradeoffs but if it isn’t easy you’d lose a substantial number of people back to duplicating the same password across 370 sites.
      - DavideNL 6y ago
        There's a problem with the family plan: There's always 1 person (family organizer) who is in charge of everything, and can reset the other accounts...

Scarbutt 6y ago

But why a whole electron app just to store passwords?

Spivak 6y ago
Why a whole GTK or Mono app just to store passwords? Once you’ve decided that you want to make a GUI for something you’ve already made the choice to increase the weight considerably. Electron is still the best cross platform toolkit when you need browser support too.
- Scarbutt 6y ago
  Electron is still the best cross platform toolkit when you need browser support too. Agree, just though it was too much for something simple as displaying logins/pass but looks like it has lots of features?
pseudalopex 6y ago
The other versions are native. It's one of the things that sets 1Password apart. Is the Linux version Electron?
- Scarbutt 6y ago
  Yes. Not against Electron but maybe I'm underestimating the ui/ux complexity of a password manager since I have never use one.
  - suchire 6y ago
    More likely it is the overhead of multiplatform support that motivates them to use Electron. Their support matrix is pretty big now: iOS, Android, Web, Mac, Windows, browser extensions, Chrome OS, and Linux
    - pjmlp 6y ago
      Amiga, Atari, Mac OS, MS-DOS, Windows, UNIX, with teams that reached around 10 maximum. How did we ever managed without Electron?!? Man we were 1337!

mkskm 6y ago

> It’s one of those apps which has been made with proper craftsmanship and care Is it? I've been using it for sometime as well but it seems like there is a lot of room for improvement. E.g: - Support for unlocking via Watch ID on the Mac. - Currently on iOS when searching for a password within an app, if a site prefix is included that doesn't match what's in 1Password the list will just show no results, with no way to navigate manually to the login. Instead, you have to close the app, open 1Password, and copy/paste the credentials back in. Typically the master password will have to be re-entered as well, despite touch ID being adequate a moment prior. Since it's rare to sign up via the web now for mobile apps, this is the most common scenario for me when using 1Password for apps on my phone (and occasionally websites as well). - Improved UI/UX on mobile. Dashlane is way better in this regard. 1Password overemphasizes features I don't need like tags and favorites and has a pretty cluttered look in general. I like the native Mac app and open/local vault format. (Dashlane by contrast has a very buggy desktop app and requires storing everything on their servers.) But I would jump at the chance to use an alternative with a simpler UI and better experience on mobile.

suchire 6y ago
We use Dashlane at work, and every day I want to switch to 1Password, which I use in my home life. Dashlane has weird permissions glitches, a really buggy and very non-intuitive desktop app, really terrible web browser extensions that makes me tear out my hair in frustration, and even the mobile app doesn’t feel like it has the features I want, like the ability to add more than one password field (useful for accounts that have PIN codes and such). Even performance-wise, Dashlane’s mobile app feels really sluggish doing things like adding 2FA via QR code’s, which 1Password seems to do instantly.
- mkskm 6y ago
  Agreed on all those points, especially the desktop app which was ultimately the breaking point for me. The only thing better about Dashlane right now is the UI on the iOS app IMO.
bwoodruff 6y ago
Thanks for the feedback! We can unlock 1Password for Mac via Apple Watch on Macs that have Secure Enclaves now. :) - Ben, 1Password

karlshea 6y ago

It's made with proper craftsmanship and care on the Mac (which is primarily where I've been using it for years). The Windows client is much better after the last major release, but it's never been as slick as the Mac version (the biggest wart now is the system tray/browser extension popup). 1Password X looks nice until you try and use it, and all the company reps on the forums are very argumentative about any feature request (look for the pushback they give about resizing their super-cramped browser extension popup—and the issues with hires screens stemming from how they built it, which assumes a fixed size). I've also got a chip on my shoulder about the "feature" they added that showed the most recently used websites in the iOS app with no way to disable it (they finally allowed setting the number to zero months later). The reps on their forums all come off with this attitude of "this is the best way, and you're wrong if you don't like it" for just about every issue that comes up. I like the app and will continue to use it, but if my main platform wasn't macOS/iOS I would have bailed long ago.

jchw 6y ago
They were also pretty dismissive of Linux for a long time, so it's kind of funny to hear it as one of their biggest requests. 1Password X narrowly prevented me from switching for a while, but I've come to see alternatives as generally better options. Yeah, they're not as flashy, but I think Bitwarden and Keepass XC do a great job. Keepass XC may even be doing a better job at security. At least in some dimensions. https://keepassxc.org/blog/2019-02-21-memory-security/ https://keepassxc.org/blog/2019-02-21-memory-security/
- karlshea 6y ago
  That’s where Agilebits has me; the UI on Mac and iOS is so much better than the alternatives. I do keep looking, Keepass XC looks really good since the last time I checked around.
  - benhurmarcel 6y ago
    KeepassXC is quite good if you mainly use it on your computer. I've been using Keepass(XC) for about 10 years, it's secure and reliable. But I'm looking to switch to 1password or Bitwarden as I'm increasingly using portable devices (phone, tablet…).

foobiekr 6y ago

I am a 1password user, and have bene for about the same amount of time, but I've been slowly looking for an alternative. Unless I'm mistaken, 1Password no longer ephemerally decrypts passwords as needed and only while used and then scrubs the memory. [1, old but still] The excuse, if I remember it, was that garbage collected languages made this challenging. Even so, there is some irony in them moving away from the temporary, one-at-a-time, scrubbed approach just before all of the side channel attacks that allowed leaking memory across processes became widespread. [1] https://nakedsecurity.sophos.com/2019/02/21/password-managers-leaking-data-in-memory-but-you-should-still-use-one/ https://nakedsecurity.sophos.com/2019/02/21/password-manager...

Hawxy 6y ago
> The excuse, if I remember it, was that garbage collected languages made this challenging This is one of the main reasons why the core of 1password was rewritten in Rust: https://support.1password.com/kb/201902a/ https://support.1password.com/kb/201902a/
- pjmlp 6y ago
  Except that one could make use of OS APIs for ensuring that, while still using a GC language.
- foobiekr 6y ago
  Interesting. But this doesn't seem to cover the Mac version.
deleted 6y ago
[deleted]

pjmlp 6y ago

Apparently that craftsmanship went astray with the adoption of Electron.

LockAndLol 6y ago
Electron? You must not be talking about the Linux app because it's written in Rust.
- pjmlp 6y ago
  Embedded in an Electron app, otherwise please correct me what toolkit they are using.
  - harikb 6y ago
    Yeah it sounds like Electron with React/JS UI talking to a Rust "backend". I would give them credit for keeping the important bits in Rust though
    - bwoodruff 6y ago
      Thank you! This is correct. We understand there are concerns about Electron (some legitimate and some religious), and we've built this app with those concerns in mind. The backend is Rust, with the arguably most critical components (encryption) being open source libraries (ring). - Ben, 1Password
moooo99 6y ago
Why the hate for electron? I know that there are a bunch of shitty electron apps out there, but there are also great, fast and leightweight examples. Visual Studio Code is easily one of the best desktop apps I've used (on Windows) and Discord is also built on electron and works very well. Electron isn't necessarily bad, its primarly a matter of how good your implementation is.
- spideymans 6y ago

bashinator 6y ago

Yup. Password management is one of those things where I want to pick the best possible solution, over the 80% good for 20% of the cost. The risks of losing credentials are real, and terrible. Making shit easy for non-technical people is a real-world risk reduction. Making shit easy for technical people is also a real-world risk reduction, and letting me put 1P into automated workflows is great. If there's minor encroachment on territory currently held by Hashicorp Vault, then "Go 1P!" - I love competition between two genuinely good products.

disposedtrolley 6y ago

I just checked my vault out of curiosity, and my first entry from 2009 is the credit card I used to purchase a 1Password licence shortly after! It’s robust software that does was it says on the box. I was initially reluctant to move out of my local vault but the online service has been impeccable.